Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: 0DxFosxtPI5A73wc0g2UD2vecoGDpbingcvKzvZSQH8=
Subject key identifier: 0C:52:6D:82:4F:E5:0F:5E:48:9F:13:58:9A:59:72:BD:7F:8C:90:58
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 019747E776F61773E448039EA9E36904B10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0A30
Signing time: Sat 07 Jun 2025 01:00:40 +0000
Manifest this update: Sat 07 Jun 2025 01:00:40 +0000
Manifest next update: Sun 08 Jun 2025 01:00:40 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: Wny/cDhRcpehkV1qQkQvD4BLP2q0/jqFagBeBSh1o/Y=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:76:f6:17:73:e4:48:03:9e:a9:e3:69:04:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Jun 7 01:00:40 2025 GMT
Not After : Jun 8 01:00:40 2025 GMT
Subject: CN=0c526d824fe50f5e489f13589a5972bd7f8c9058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:c5:a7:5b:93:ff:db:8a:47:c1:f4:a0:af:
62:bd:97:f9:fa:eb:4e:aa:47:4a:4e:e4:7d:4b:09:
af:a5:d0:79:b5:42:03:ed:6a:75:af:a8:9f:ab:17:
cd:1b:f8:73:6d:1f:57:df:97:70:d7:7a:32:05:eb:
2b:b9:3d:22:f6:0e:a3:a1:30:bb:ca:7e:8d:f9:f7:
1c:d1:82:bf:c2:dc:79:6d:a3:dd:ac:50:61:ca:7b:
4b:bb:d0:e8:92:07:1a:56:b2:37:9a:08:29:3a:8b:
d5:c8:97:2a:1d:0e:c7:14:e0:43:47:16:f1:40:63:
1c:c3:56:7c:0d:59:ff:92:47:00:8b:4f:9e:86:7a:
a9:3c:77:70:32:29:64:aa:6b:e8:b8:65:4e:97:73:
8f:d2:79:e9:3f:42:db:98:8f:93:b9:3e:9a:f2:20:
43:ea:6b:e5:35:3b:94:d6:1a:8e:36:2d:b8:32:fe:
31:72:51:9d:fc:27:5b:a3:c9:6e:3d:7f:17:21:90:
2e:73:3e:a2:40:08:2d:f3:1b:da:c6:82:64:75:4e:
71:0f:63:6a:c9:57:72:30:c7:98:2f:9b:e7:15:5a:
70:2d:fc:63:64:6d:d3:79:4c:31:bd:51:61:a0:43:
82:d9:be:3f:60:88:e1:ba:3e:23:b9:ac:ad:90:56:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:6D:82:4F:E5:0F:5E:48:9F:13:58:9A:59:72:BD:7F:8C:90:58
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1a:31:41:23:d6:bc:c2:de:6d:2e:bb:48:d9:a7:d0:8a:e0:
1e:9e:fd:d1:42:68:71:46:61:f7:85:c8:30:f2:60:12:e5:f0:
a9:29:b2:c6:ee:77:f6:be:24:5f:9f:4f:81:cf:58:6f:f6:2a:
1b:7b:cf:f5:2a:cd:1e:06:d2:d0:17:b1:80:5d:df:f9:44:4c:
35:87:17:ce:55:1c:b7:db:fb:9f:24:4a:dd:68:1d:89:a7:45:
8b:8b:72:79:f3:e6:85:e7:55:01:3e:80:ed:74:53:76:42:f4:
bf:09:6c:29:6e:f0:f5:d8:8c:9b:5c:cf:8a:79:c9:24:60:0c:
ba:d2:64:94:e7:81:41:95:d7:62:56:5f:63:ef:39:06:6c:e0:
af:eb:ba:da:70:27:fa:6c:25:09:81:76:79:0d:b4:cb:07:cc:
29:31:38:b0:b4:3b:84:b8:9c:6b:8e:55:16:44:38:a6:5b:08:
a9:4d:e9:f9:ff:7d:e0:1d:da:70:18:b2:75:09:52:cd:f2:d9:
5a:0c:17:1f:08:e6:44:8b:ab:82:66:9c:48:5f:5c:9a:fe:b7:
cc:2b:de:96:4b:d3:00:54:61:62:ca:2e:40:7b:c9:6b:80:ed:
4e:01:b1:f1:2a:e6:bc:7b:93:72:74:89:44:14:31:0b:fe:16:
a7:c6:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:29:35 2025 by rpki-client